Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3IV71ANlMrn2YVo19-MvmE0loE8.roa
File: 3IV71ANlMrn2YVo19-MvmE0loE8.roa (raw, json)
Hash identifier: FHZjAZfiJI3/nKwDWFyh24Ddl2JC13ZAs3xt0OgwVDw=
Subject key identifier: DC:85:7B:D4:03:65:32:B9:F6:61:5A:35:F7:E3:2F:98:4D:25:A0:4F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010B8E4F675621D0DD9FD2AD739B86
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3IV71ANlMrn2YVo19-MvmE0loE8.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 193.26.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 09:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:8e:4f:67:56:21:d0:dd:9f:d2:ad:73:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc857bd4036532b9f6615a35f7e32f984d25a04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:a3:2c:e1:54:b5:b9:39:a3:fa:d9:c8:8f:
54:e2:3d:33:3f:8f:bf:60:07:42:ef:fc:cc:72:2d:
04:af:3a:f9:6d:df:29:36:3b:33:6e:3d:62:b5:da:
cc:1f:ea:9a:77:c6:70:0c:af:b9:e9:77:b5:29:c1:
9c:d5:b8:14:b1:49:8a:a0:d3:05:3b:68:02:86:b1:
3d:cd:17:02:c7:55:6a:84:48:08:1a:74:1a:67:cd:
f3:5b:c6:8c:cd:63:08:be:15:21:54:47:a1:dd:9d:
ca:5d:00:f7:63:46:53:d0:8c:3e:90:09:6d:cb:6e:
12:f6:61:9d:28:cc:41:f1:00:56:70:66:13:47:bf:
4c:0c:65:cb:19:d7:39:19:a9:40:a4:c6:de:7d:2f:
6b:17:82:23:01:7b:1b:80:93:f8:a5:bf:32:ca:3b:
0b:ed:23:14:73:c2:4d:b7:7c:f5:c3:cc:12:62:80:
03:d9:1a:a7:b8:0c:1f:90:6e:d2:6a:59:fa:d2:c0:
63:77:c2:68:19:26:35:fc:0e:34:f7:93:7d:73:0d:
39:9c:1f:66:30:ef:5c:27:c9:fd:2e:fa:55:52:78:
a2:06:8f:c7:1b:93:78:bd:48:b4:4b:c8:f5:ed:6a:
51:4e:9f:d9:3e:71:0c:59:a1:a0:22:2c:d0:30:a8:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:7B:D4:03:65:32:B9:F6:61:5A:35:F7:E3:2F:98:4D:25:A0:4F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3IV71ANlMrn2YVo19-MvmE0loE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.115.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7a:88:83:e0:81:da:13:21:76:a6:50:dc:62:11:38:1d:c2:
e8:37:b1:39:63:a4:88:07:89:62:2c:07:40:5f:81:d4:a3:c8:
ae:51:9a:df:25:a6:23:4d:a7:8b:65:34:17:96:c4:5b:bb:86:
87:93:fa:da:9e:1d:7f:6e:4e:b7:b1:44:a2:7c:4b:26:0e:39:
a8:ed:fd:2c:b0:5e:6d:d4:a6:e6:c9:ee:51:73:d5:55:f3:e0:
c1:30:f8:06:84:39:cc:30:04:5d:27:ef:69:bb:0d:24:af:35:
07:09:1d:9d:24:4b:bd:11:09:b1:78:16:88:e0:57:23:ab:53:
99:15:39:8c:41:98:d9:0f:61:9c:21:8f:0c:e5:73:90:ec:4e:
5b:10:13:e3:af:d7:22:0b:96:95:83:50:a2:f2:87:c0:ba:4e:
c3:25:22:9b:11:fe:ed:ac:ad:a8:42:7b:f2:d5:d5:04:8b:3a:
f9:b0:5c:25:d1:2b:0a:10:c1:4e:83:67:55:e2:56:2d:42:12:
36:76:af:5a:f2:34:50:96:70:06:dd:61:6d:ae:33:b4:72:77:
a8:16:ca:ba:b4:7c:54:44:b7:51:ff:14:f1:82:22:7e:d5:77:
d4:52:f9:7d:23:0a:f2:17:c4:1f:76:b2:d2:9d:5d:f3:16:4e:
2b:a9:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:41 2024 by rpki-client on console-ams.rpki-client.org